DarkMe Malware Targets Traders Using Microsoft SmartScreen Zero-Day Vulnerability

A newly disclosed security flaw in the Microsoft Defender SmartScreen has been exploited as a zero-day by an advanced persistent threat actor called Water Hydra (aka DarkCasino) targeting financial market traders.
Trend Micro, which began tracking the campaign in late December 2023, said it entails the exploitation of CVE-2024-21412, a security bypass vulnerability related to Internet

actor advanced advanced persistent threat called campaign cve cve-2024-21412 darkcasino december december 2023 defender defender smartscreen exploitation exploited financial flaw hydra malware market micro microsoft microsoft defender persistent persistent threat security security flaw smartscreen targeting threat threat actor tracking trend trend micro vulnerability water zero-day zero-day vulnerability